CVE-2019-10100

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1040%

EPSS Percentile29.00th

Published2019年7月3日

Last Modified2024年11月21日

Vulnerability Description

In JetBrains YouTrack Confluence plugin versions before 1.8.1.3, it was possible to achieve Server Side Template Injection. The attacker could add an Issue macro to the page in Confluence, and use a combination of a valid id field and specially crafted code in the link-text-template field to execute code remotely.

Affected Platforms (CPE)

📦

Jetbrains

Youtrack Integration

< 1.8.1.3

References & Advisories

🔗 https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/

Vulnerability Description

Affected Platforms (CPE)

Youtrack Integration

References & Advisories

相关漏洞威胁